The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109179: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109178: Missing Authorization5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109177: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109176: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109175: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109174: Incorrect Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109173: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109172: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109171: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109168: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109167: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109166: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109165: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109164: Authorization Bypass Through User-Controlled Key7.1 High7.1 High0%Oct 12, 2026
CVE-2026-108953: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High1%Oct 12, 2026
CVE-2026-108952: Access of Resource Using Incompatible Type4.6 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-108951: Incorrect Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-108950: Missing Authorization5.3 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-108889: Exposed IOCTL with Insufficient Access Control4.4 Medium1.9 Low0%Oct 12, 2026
CVE-2026-108836: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 12, 2026
CVE-2026-108835: Improper Privilege Management4.4 Medium4.8 Medium0%Oct 12, 2026
CVE-2026-108834: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 12, 2026
CVE-2026-108831: Use of Hard-coded Credentials6.3 Medium2.1 Low0%Oct 12, 2026
CVE-2026-105081: Improper Link Resolution Before File Access3.6 Low2.0 Low0%Oct 12, 2026
CVE-2026-85499: Incorrect Authorization9.1 CriticalN/A0%Oct 12, 2026
4726-4750 of 412906
‹›